In the Claims: 

Cancel Claims 1-14 and add the following new Claims 15-47. 

15. (New) A system for using a shared key to transmit secure data 

between a client and a server, the system comprising: 
an encrypt/ decrypt engine for using the shared key to enciypt 
or decrypt data, the encrypt/ decrypt engine being 
configured for delivery via a web page to a client in 
response to a user request and further configured to 
encrypt data independently of an identity of the physical 
client; 

wherein the server includes a user private keys database 

configured to store the shared key. And, wherein, it is 
possible for the client and the server to reside on the same 
physical computing device. 

16. (New) The system of claim 15 wherein the shared key is a user's 

private key entered by a user into the web page. 

17. (New) The system of claim 15 further comprising a secure data 

database configured to store data received from the client and, 
upon the completion of a processing step, to deliver the stored 
data in an encrypted format to the client or to another client. 

18. (New) The system of claim 15 further comprising a secure data 

database configured to store data received from the client and, 
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upon receipt of a request for the data, to deliver the stored data 
in an encrypted format to the client or to another client. 

(New) The system of claim 15 wherein the shared key is 
transmitted between the server and the client as few as zero 
times and the shared key is transmitted between the server and 
the user as few as one time. The key is not sent for 
authentication purposes, rather, the effect of the key in the 
encryption process is sent. Consequently, the shared key does 
not need to be retransmitted once it has been established. 

(New) The system of claim 15 wherein the shared key is a user's 
private key entered by a user. 

(New) The system of claim 15 wherein the client encrypt/ decrypt 
engine is installed on the client. 

(New) A system for using a shared key in transmitting secure 
data between a client and a server, the system comprising: 
an encrypt/ decrypt engine for using the shared key in 

encrypting data, the encrypt/ decrypt engine being 
configured to encrypt data independently of an identity of 
the client; and 
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a user private keys database located on the server and 

configured to store the shared key, the shared key being 
the private key of a user. 



(New) The system of claim 22 wherein the server is configured to 
decrypt encrypted data received from the client using the shared 
key and to use a private server key, known only by the server, to 
re-enciypt the decrypted data. 

(New) The system of claim 23 further comprising a secure data 
database configured to store the encrypted data received from 
the client and re-encrypted by the server and to deliver the 
stored data to the client or to another client; the delivered data, 
after the completion of a processing step, being encrypted with 
the shared user key or with another shared user key. 

(New) The system of claim 23 further comprising a secure data 
database configured to store the encrypted data received from 
the client and re-encrypted by the server and to deliver the 
stored data to the client or to another client; the delivered data 
being, upon receipt of a request for the data, encrypted with the 
shared user key or with another shared user key. 

(New) The system of claim 25 wherein the request is from the 
user. 
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27. (New) The system of claim 25 wherein the request is from an 
other user. 



1 28. (New) A system for using a shared key in transmitting secure 

2 data between a client and a server, the system comprising: 

3 an encrypt/ decrypt engine for using the shared key entered by a 

4 user to encrypt data entered by the user, the 

5 encrypt/ decrypt engine being configured such that all 

6 data entered by the user and stored on the client is stored 

7 in encrypted form, and further configured to encrypt data 

8 independently of an identity of the physical client; the 

9 shared key entry being the responsibility of the user and 

10 not the client; 

1 1 the server including a user private keys database configured to 

12 store the shared key, the shared key being a private key of 

13 a user; and not a physical client 

1 29. (New) The system of claim 28, wherein the encrypt/ decrypt 

2 engine uses a symmetric key encryption/ decryption algorithm 

3 for encrypting and decrypting data. 



{00060392vl}7 



30. (New) The system of claim 28, further including a web server 

engine configured for the user to securely send or receive data 
from the client to the server. 



3 1 . (New) A method for using a shared key in receiving secure data 
on a server, comprising the steps of: 

delivering from a server to a client a web page including an 

encrypt/ decrypt engine; 
encrypting data on the client using the encrypt/ decrypt engine 

and a shared key entered by a user of the client, the 

shared key being shared between the user and the server; 
delivering the encrypted data from the client to the server; 
receiving the encrypted data at the server; 
decrypting the encrypted data at the server using the shared 

key; and 
processing the decrypted data. 

32. (New) The method of claim 31, wherein the step of processing the 
decrypted data includes the steps of: 

encrypting the decrypted data with a private server key; and 
storing the encrypted data in a database. 
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(New) The method of claim 3 1 , wherein the step of processing the 
decrypted data includes the steps of: 

re-encrypting the data with an other user's private key shared 

between the other user and the server; and 
sending the re-encrypted data to the other user. 

(New) The method of claim 31, wherein the step of processing the 
decrypted data includes the steps of: 

decrypting the encrypted data with the private server key; 
re-encrypting the data with a second user's key shared between 

the second user and the server; and 
sending the re-encrypted data to the second user. 

(New) The method of claim 31, wherein the step of processing the 
decrypted data includes the steps of: 

processing the data according to an instruction of the user; 
re-encrypting the processed data using the user's shared key; 
and 

sending the re-encrypted processed data to the user. 

(New) The method of claim 31, wherein the step of processing the 
decrypted data includes storing the decrypted data in a secure 
database. 
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(New) A computer-readable medium comprising program 
instructions for causing a computer system to use a shared key 
in receiving secure data at a server, by the steps of: 
delivering a web page from the server to a client, the web page 

including an encrypt/ decrypt engine and being configured 
to use the encrypt/ decrypt engine and a shared key 
entered by a user of the client to encrypt data on the 
client, the shared key being shared between the user and 
the server; 

receiving the encrypted data at the server; 

decrypting the encrypted data using the shared key; and 

processing the decrypted data. 

(New) A computer-readable medium comprising program 
instructions for causing a computer system to receive secure 
data on a server using a shared key, by the steps of: 
delivering an encrypt/ decrypt engine from the server to a client, 
the encrypt/ decrypt engine being configured to use a 
shared key entered by a user of the client to encrypt data 
on the client, the shared key being shared between the 
user and the server and the encryption being independent 
of an identity of the physical client; 
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receiving the encrypted data at the server; 

decrypting the encrypted data using the shared key; and 

processing the decrypted data. 

(New) The computer readable medium of claim 38, further 
comprising program instructions for causing the processed 
decrypted data to be re-encrypted using a private server key. 

(New) The computer-readable medium of claim 39, further 
comprising program instructions for causing the processed 
decrypted data to be stored in a secure database. 

(New) The computer-readable medium of claim 38, wherein 
processing the decrypted data includes the steps of: 
re-encrypting the data with the private server key; 
storing the re-encrypted data; 

decrypting the stored data with the private server key; 
encrypting the data with a second user's key shared between 

the second user and the server; and 
sending the encrypted data to the second user. 

(New) The computer-readable medium of claim 38, wherein 
processing the decrypted data includes the steps of: 
processing the data according to an instruction of the user; 
encrypting the processed data using a shared key; and 
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sending the encrypted processed data to the user or to another 
user. 



1 43. (New) A method of using a shared key in transmitting secure data 

2 between a client and a server using a shared key, comprising 

3 the steps of: 

4 encrypting data using the shared key with an encrypt/ decrypt 

5 engine configured to encrypt data independently of an 

6 identity of the client, the shared key being entered by a 

7 user of the client; 

8 delivering the encrypted data from the client to the server; 

9 receiving the encrypted data at the server; 

10 decrypting the encrypted data at the server using the shared 

1 1 key, the shared key being stored in a user private keys 

12 database; and 

13 processing the decrypted data. 

1 44. (New) The method of claim 43, wherein processing the decrypted 

2 data includes the steps of: 

3 encrypting the decrypted data with a private server key; and 

4 storing the encrypted data in a database. 

1 45. (New) The method of claim 43, wherein the step of processing the 

2 decrypted data includes the steps of: 
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encrypting the data with an other user's private key shared 

between the other user and the server; and 
sending the encrypted data to the other user. 

(New) The method of claim 43, wherein the step of processing the 
decrypted data includes the steps of: 

decrypting the re-encrypted data with the private server key; 
encrypting the data with a second user's key shared between 

the second user and the server; and 
sending the encrypted data to the second user. 

(New) The method of claim 43, wherein the step of processing the 
decrypted data includes the steps of: 

processing the data according to an instruction of the user; 
re-encrypting the processed data using the user's shared key; 
and 

sending the re-encrypted processed data to the user. 
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